The next module we'll take a look at is the CIS module by arildjensen. This module implements the Center for Internet Security benchmark standard for RHEL 6. In terms of support, this module lags a bit since it only supports Red Hat 6-based operating systems. However, it can serve as a great base for building your own module for another Unix-/Linux-like operating system.
The CIS benchmarks are a set of configuration standards that establish a baseline or benchmark for a secure system. It is a widely used and accepted set of standards, referenced in the PCI DSS standards and others.
The CIS benchmarks exist for a variety of operating systems and applications, including VMware, Apache Tomcat, and others.
Note
For more information on the CIS benchmarks, see http://benchmarks.cisecurity.org/downloads/benchmarks/.
The arildjensen/cis module implements the security benchmark for Red Hat 6 systems. It implements each of the individual controls as facts or manifests. We'll...